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[«&*] ftrnm 

[M##] 0051429 

[iimH] 5pfi£l2*£ 7J!13H 

[BRS4#i ! HMB] G06F 15/00 

[ft*] toj 

i&ffixitmmi w&)im)\m^itpmm±'mtp4TB i#i# *±» 

[ft*] era 

[^mx^jgmi #sK/rijR/«rff*«EJt/.hH*4 t gisit *±» 

[ft*] IE0 

[ft*] j*@ sea 

[ftmxiijgm] #^;ifjR;n«»rt*is(i2:±/jNH4»4TB *±» 

[ft*] ^niS » 
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000005223 
[^Stf##] 100089141 

[^mXliJgm] JKMBB»EW1T@2 l#20-603# 

03-3725-2215 
015543 

[«f#^«] 21, 000 R 

mm* i 

Mfcl* l 

[&&^fi^#-^] 9705795 
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i ] 

. z.ftt>£.mhfe&>fj]s- zf&(Dmm ± <omnuMK. o v > t««© sou- t? 

M Wft & « # L tf y h #f 0 fc i & #« £ "T S l SBH 

So 

3 ] 

-LIB MIR L * 19 ^ - # IC -d V n T Sft r iZ ft ^« £ fffc o ft iZ & 

t* & fx 3 r & ## * * MfcE 1 !Bi^©i£*ii£ J^ISMo 
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[0 0 0 1] 

^©-e&s,, 

[0 0 0 2] 
[0 0 0 3] 

t£3fc, M»JS'»TtB&#«fcbT, des©J£:*«£i«#^#&*. 'ODE 
[0 0 04] 

^fttfJ: UffiV^5££:bT> MARS0TO4^H (MARS-a 
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candidate cipher for AES,THE First AES Conference 1998 pl-p9)^ 
[0 0 0 5] 

[0 0 0 6] 

ag-T «>> WJfcJcJ&ai &fjfc -5 z: £ #T*-£ & £ V* ? RH£tf% o 
[0 0 0 7] 

[0 0 0 8] 
[«B & <5 «> 

[0 0 0 9] 
[0 0 10] 
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[0011] 

v>T^ts:©^;i/-y^T^^^^$:^ti^tii -Diet ntb&mmzn&w 
b x j» r o^it & & <fc e> k l t v x s „ 

[0 0 12] 
[0 0 13] 

m&zn* o <fc o jc br ^s. 

[0014] 
[0 0 15] 
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[0 0 16] 

tst.0T'fcoT, m^itmmmm 2 £ <t &m*m#km.mu 3 & e & e> mm. 2 ti 

[0 0 17] 

m-^itmmmm 2 fe^i^^js^n^^^^Ht-^-fb^ (1) a^it 
-JHt^s (n) <d nmrnoyjum^n^K ^^c^mvxia^-t^^^x^^ 
o m^itmm (D ^^^mm (n) t^aifi3t^$tifet 

[0 0 18] 

* ^ - # 4 33 <fc Tfmxm&i&mn 5 & £ e> *t/£ $ *i 5 © 73 5 . 

[0019] 

^-TS^CJDTr&S (02, @4&£f#J80 . 

r£tc, ®2©>'n-^-v- ^cDJlS^c«ev^Hlco«m^) : fo^:T*Bi#ll^e>^^;^: 
[0020] 

H2jci3v*T, Site, rL-ifH^AiJ-rSc dfttt, Hi®Bf#fb^gilc 

[0 0 2 1] 
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[0 0 2 2] 
S3H teifc<Z>£^lc)£i!t£2nB-tSo 

[0 0 2 3] 

S5H #ff&6^l&a3m$:^i--So dtitt. Mt6@3 lCatfJ:^}C. S4 
[0 0 24] 

#mmmmM*mnv. ^f-fjws. S4, ss, S6t% mm 
(D&m m7Uxm3<Dm&ic& i = o, i, 2jc^js^-s3oj£8t) jcov^r-e 

[0 0 2 5] 

#^IC^va, *nr3j!3Etft«:«fe*»^o (@3T-li3o^5o) 2>m?>&5 4»f§7 ; - 
[0 0 2 6] 

e>Si i^ii^K:ftu*?-5£i:#RriBfc&*. 

[0 0 2 7] 
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[0 0 2 8] 

S9H Jgffcr iC^ofcllgg&ff&^o 04 0 (a) (Of - #MtF# 

x-jjllift', Jg&tr £A:frl,T, S 8 T'M^Lfctfil^- #<DmWZfitez> ( 
H5© (c) , (d) c 
[0 0 2 9] 

S 1 Olt. mM&<n*m?-Z<D^&MWkGl£ltxte? (®4<Z) (b) #M) 

o 

suit rmma&xmzmjj-t&o siot'iiifctcf-^ 

[0 0 3 0] 

si2jt »fcy*»fljM"r*. YEsoi^ica, nits. No<z)^tc« 

r{CfoT«tbfet, *nT3S3Elft«:ffv^ «)tStife««r ©fife^ftt&^Br^ 
[0 0 3 l ] 

h 3 teaser, ±a®ko*»e)k7tt, wf-jhi (^-ifn) hpizmft 

[0 0 3 2] 

+ rrx% M (4 i) #iJLk^yh#J© 

k0^mTOLfc@20S 3 JC, i = 0, 1, 2<DH£(D 

) „ M (4 i + 2) „ M (4 i + 3) {COV>%, i = 0, 1, 2 <D £ %<DfeWM 
(Dm £ ■€■ *l ti Anlt L 3 o £ ffi "T £ © 5: * "T . 
[0 0 3 3] 

xii, 5£ffc<Z>iilt|L£^f3\ irt, i + l©^tt, ^SILfct^ h#!<Dk<Z) 
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8&^#M*i«^Ufc02©S4©Wf$C©^-a-lC, i = 0, 1, 2<DHg<Dfem. 
[0 0 3 4] 

+ it. tarns & T$mn l fc*s*©^»»afn©«»«:ff * t> © zm-t* 

a i ^e>d i «, hm-3-D<D$'ffi'r-&<DliijjZm-* 0 ZZLXl*. a^^d 
. (i = 0, 1, 2) ©3o-^o©m^J^tlfc*K^-^$:^-ro 
[0 0 3 5] 

mmmM zwiw i, mm® % © \z z -d <D&m. * * ti^etiiaw-is & t^isc© % 
i -Diz-t t.#>. Miz^mmmmM^mnLx z oooffltfif-^«t5 z: 

[0 0 3 6] 
H4tt. #3Sf9!©SiOT (ftffiftt) 

[0 0 3 7] 

04© (a) JCfcHT, if»H5*-#M:, a i , b ± , c ., d- ( 

i = o, i, 2) #e>fc«, i3©iiT'M3tifctfHf-^ (*ra«) -e* 

So 

[0 0 3 8] 

selectMflt f^«0J:-5i:'r*fifc*«t©««r«:%i:K:. *H 
f-n r b if c i( d i (i = 0, 1, 2) ©3*>©V>"f *l© i ©%©& 
afl-rS^Srftfe-r**)©^**. ftgtt,.tj*t«H5«D (a) ©5$ (1) JC 

[0 0 3 9] 

selector tt, s e 1 e c t M^ittCJ: oTifeJtS tlfcX r , Y r 

, z r , w r jcf£v^ r^T-ii, i = 0, 1, 2©^^-^s : b©©cf I ^f : -^ a 

(x r K b (Y r ) , c (z r ) , d (w r ) &io**i-rna!iRi-6*©-e 
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[0 0 4 0] 

7 : -*m&mz.mL&mt. m&r£*>£tc, mm^nr^mf-^ a (x r 

) , b (Y r ) , c (Z r ) . d (W r ) (DMZfm*. Ofgfi) &*T&e>=b©T& 
Zioettt, 5 © (d) ©J^IC, K*ffSLfc^fi£?Tfc 

[0 0 4 1] 

G (X, Y, Z, W, r) ff-MMKH:, Ml^*.^©*!^-* (X, Y, Z 
, W) £%fc{C, i^iE x Key r Mt5 : b©t^ 0 r*Ui, ^Mi"* 
04© (b) 0fMi:iE x Key r MtS. 
[0 0 4 2] 

04© (b) te, 04© (a) ©G (X, Y, Z, W) #fim»©#I^B«J&£ 
[0 0 4 3 ] 

04© (b) iCfcV^ 1 b i t &mm*/7 Mi, T—#G>\f V 1 \fv 

[0 0 4 4] 

anm*, 2o©7=-^s:in^frs*»©i?«>So 

jeu:©igs& & 0^© <t e> tc&& isxmfemm z^n \zmiRis * tf&a l £^© 
(x, y, z, w) *^jfcfci^^rt<5z:£#orfg£&£c 

[0 0 4 5] 
0 5te, #3fcf8©t&HH0£*t1- o 

05© (a) te, iM^oOOtfJ^^-^^batfcr ©=&©£ 1 oMtSfct 
lc^J8-f55£ (1) $r^-r o 0^©5£ (1) teTfBT?&<g>. 
[0 0 4 6] 
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X „ =Z = r mod 3 
r r 

Y r =W r = r+ [r/3]mod 3 
05© (b) te. 05© (a) ©5$ (1) S:^WiC^-r o ZltUi, 0 5 (7) ( 
a) ©5£ (1) ©M£|g|glCfffrLfc=*j©-£&oT, ^ffcr©££lC0, 1, 2 

[0 0 4 7] 

(a) , (b) X-mmr IZMfo-tZm (i = 0, 1, 2©3f© 
?*>©1^) £&5£U gB£L£04© (a) T' i f@^o©tf f^- # tf^*> ^ 
^©IfcrT'&ofc (X r , Y r , Z r , W r ) ^MtS 3 £#nr|g£fc£ 0 
[0 0 4 8] 

05© (c) te, *-#m*m-? B Z<D*-#mi*. 05© (a) , (b) T 
jglRLfc^ifcr©*^-* (X r , Y r , Z r , W r ) &Mtmx.& 
tSili®^--^ OBJ*) §:^t5t)©tfeS„ I^TH £$[©S£fcr tc*f 
^^^T^W^afe^^Wa^JCm-t <fce>lC, (04 <Z) (a) <D^-$ 

[0 0 4 9] 

06© (a) ^MSHSCM©^#©^«c©^©M$:^-r= 3ZLT*te. n. 
-if* (Bff#tt) m (M^.^3 2lfyh) £A#£U #i^MS8IS:M$:^#LT 
(3 2hfyh) £%<Dm*ZWim?Z>o 
[0 0 5 0] 

(1) rL-1f§i©3 2 lf<y h?:3Z:T*«0^©J;e>lC, 6, 5, 5, 5, 5 
6 \±y V"T:WkTD.0 t ml, m2, m3, m4, m 5 iZ^rtl-Zn-frm-? So 

(2) 5 \£ y MC#i!JL£ni 1 , m2, m3, m4ttU 06© (b) ©S5 

(x) ©*JCttV*, ^fSx{C^t5S5 (x) <Dmz*M*m$k~?z>* 

[0 0 5 1] 

(3) im^tC, 6 y£v MC#fILfcm0, m6ii 06© (c) ©S6 (x 

) ©3i&csevv iStSxi:f)Stss6 (x) ©ffiic^-ti^ti^glt- So 

(4) (2) t (3) |C<fcotv^6© (a) ©^- # v #£j&$;ftfc Zl 
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[0 0 5 2] 

(5) 0 7© (e) Km^^-tn^K. 07© (d) fr?>&ftrT^1- 
[0 0 5 3] 

JSUllCioT, 06© (a) <DMmZ7*-tm%fKffi.\,K MAtf03©#^MM 
&M©?tlES:fT & ? d £#«Ifg£ fc5„ 

06© (b) Iii6© (a) ©S5 (x) ©-r-:/;i/M£^U 06© (c) 
&0 6© (a) ©S6 (x) ©^-^l/MSr^-f o 
[0 0 54] 

07© (c) &#mMmwLMZftFmn-?z>£%<7>&m. (MDs&ffl^txo 

Rtfjm«T*JBV^5££!D 07© (d) teMDSSrffi^fcXORim^ 

[0 0 5 5] 

[0 0 5 6] 

(1) ^impg©^.a (^-vmfr%tpmT-*it$i&.-t2>mm) 

(1 - 1) 2 5 6tf «y h©H|f-ifit£, 3 2 fcfy h^TillC 8flOf-^ k 0, k 
1, • • • k7K#i!J-r£ (03#M) 

(1-2) ( 1 - 1) T*&misf=.3 2 \£v V *A±}1 U 3 2l^^h$:m^ 

t^mmmmM^m^x. j^t© (1-3) (1-6) ommzzv. * 

IS^-^a (i), b (i), c (i), d (i) ©£/££i = 0, 1, 2 ICO 
^Tfrfc? (0 3#M) . #*SW»MK:oV%T, (3-D (3- 

6) 5rH^-rSo 

[0 0 5 7] 



1 1 
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(1-3) a ( i ) =M (T a (k 0, i)XOR Ua(kl, i) & If 
^C-TSo fc£U Ta (kO, i) =M (kO) +M (4i), Ua (k 1, i 

) =m (ki) x (i + i) -e&s. m> xorh mmmmmm$m*m-? 0 

[0 0 5 8] 

(1-4) b (i) =M (Tb (k2, i) XOR Ub (k3, i) & 
ffltS. fc£U Tb (k3, i) =M (k2) + M (4 i + 1) , Ub (k 
3, i) =M (k3) X (i + 1) T'&So 
[0 0 5 9] 

(1-5) c (i) =M (Tc (k4, i) XOR Uc (k5, i) £ 
ft^-reo fc£U Tc (k4, i) =M (k4) +M (4 i + 2) , Uc (k 
5, i) =M (k5) X (i + 1) -C&So 
[0 0 6 0] 

(1-6) d (i) =M (Td (k6, i) XOR Ud (k7, 1))$: 
9tn~t2>. fc£U Td (k6, i) =M (k6) +M (4 i + 3) , Ud (k 
7, i) =M (k7) X (i + 1) Tf&£„ 
[0 0 6 1] 

(2) mzmmvmm (#ra^- *fr*>mfet*tit=.mm.r (Dmxmz&f&ir 

-5^.3) : 

(2-1) rllffljK^iExKe y r (r = 0. 1 - • ) K~D^T. J£TFtf> 

(2-2) (2-4) izm^mmznteo (04© (a) #nto . 

[0 0 6 2] 

(2-2) Xr=Zr = r m o d 3 , Y r = W r = r + [ r / 3 ] m o d 3 
(^ (1) ) T^£*l£jgt#jX, Y, Z, W£MV>T, (X, Y, Z, W) = ( 
a (Xr) , b (Yr) , c (Zr) , d (W r ) ) 
[0 0 6 3] 

(2-3) r' = (r + [r/36]) m o d 1 2 *mt=.? r * JCWUT, ( 
X, Y, Z, W) =ORDER_12 (X, Y, Z, W, r' ) t^$Wf- 
$MXfW%.Zft*Oo fc!EU ORDER_12 (X, Y, Z, W, r' ) it, 
@5© (c) IZU? 0 
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[0 0 64] 

(2-4) ExKeyr=G (X, Y, Z, W) JC*»J, r ^$[tf> 
tf-B-rS 0 ££U G (X, Y, Z, W) = ( (x«<l) +Y) XOR 

( ( (z«<i) -w) «<i) T?»y, «< i it i \iv h&mmts? b 
&3t-r (04© (b) #jso o 

[0 0 6 5] 

( 3 ) mmmmv^m-WM : 

(3-1) 3 2If>^AAm^e,, J£*T£> (3-2) (3-6) {Cfi^ 

, 3 2^>yh©w&a}*tS (06© (a) #J80 „ 
[0 0 6 6] 

(3-2) m£lf-/ h^SIbfcffim 0 , • • - m5t J^TlC^o T-£3.£ 

o 

m0= (m©!0 lf*y h@^^5 \Zy h) 
ml = (m©16 t?>y hg^^l 0tf>y h) 
m2= (m»il 1 \Zv SBA^f 1 5lf*y h) 
m3 = (m®il 6lfy h gfr ££l 2 0 If *y h) 
m4= (m©f 2 2 5lf<y h) 

m5= (m©^2 6 If >y 3 1 If v h) 

(3-3) 5lf>y h(DA^JlC*fb5 tf-/ h$:miJi-S^M^BB®[S 5, 
6Vf>y h©A;frlC*fL6lf>y h & m^iT S#ilM»IB8ifc S 6 &m^T, 
s 0 = S 6 (mO) 
s 1 = S 5 (ml) 
s 2 = S 5 (m 2 ) 
s 3 = S 5 (m 3 ) 
s 4 = S 5 (m4 ) 
s 5 = S 6 (m 5) 
ZLZLT, S5, S 6 £|fcj£b£:06© (b) . (c) lC-£:ft-?*lati- 0 
[0 0 6 7] 

(3-4) v=sO | sl| s2| s3 | s4| s5IJf*t«. | ft*. If 



1 3 
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(3-5) v<D i #B©fcfy bm v i , £ <£tf 5 If y h Afifrb 3 2 tf y h 

w= (v 0 XMD S (0) ) XOR (vlXMDS (1) ) XOR • - - X 
OR ( v 3 1 XMD S (31)) fcttW-tSo v i XMD S (i ) 

vi = 0©t|0, vi = l<Z)££MDS (i) T$><5„ * fc, MDS»07ffl 
(d) IC^-Po 

[0 0 6 8] 
(3-6) wSrm^J-r^o 

[0 0 6 9] 
[#i^©^] 

j£U m2mPgT^ra^ : -^^e>fiES©7 ^ -^S:^bT#^r^gl$:^V^tt 

(1 ) mx-Wis^-* s: i«fe«"r«fctt) Kittys 3&«ya«pia««<K« , e» 

[0 0 7 0] 

(2) 4iL«^iExKeyO, ExKeyl, • • • E x K e 
[0 0 7 1] 

— mmz&mm^ttl** ExKeyO, ExKeyl, • • • 

ExKe y n- 1 (DJSfCffi^HtfM V^*l5^-£\ m.-^itX'lt. ExKeyn- 
1- • - ExKeyl, E x K e y 0 <D <fc o IC. m-%fc£l*&<DmT*1&j<Z^tfm 
V^^nSc ZlZl-e, ExKeyU4^t6©{:ExKeyO0ll:^fct5 
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K e y 1 lZW.&£.&-t&ZL£.tf-e : £"f, SfclCE x K e y 0 Z£.f&VX ZLtl*m^ 

it*. v*>m<&z> 0 

[0 0 7 2] 

:*dg&£f&T- S^ExKe yO, ExKeyl, • • -ExKe 
y n - 1 <DMlZ£.f&-tZ><D : h. ExKeyn-1- • - ExKeyl, ExKe 

[0 0 7 3] 

[HI] 
[H2] 
[03] 
[H4] 
[05] 
[06] 
[07] 
[08] 
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1 : Hf#>fbag 

2 : it-iHt*ragie 

5 ; 

G : #nB£B8Ifc 
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[01] 



mm 



¥2: 



B&#<b*&«(1) 



* 



I 
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[02] 



(start) 



S1 



3-— fm&xji 



S2 



S3 



Statin 



S4 



S5 



S6 



S7 

— > 



IBS r £A2J 



S8 



S9 



S10 



S11 




C END ) 



2 
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[04] 



(a) 



select fit 



atX r ] 



b[Y r ] 



c[Z,] 



G(X, Y. Z,W)ffW^M 

1 

ExKey r 



a[0] 




b[0] 




c[0] 




d[0] 


a[1] 


b[l] 




c[1] 


d[1] 










a[rr-1] 




b[n-1] 


c[n-1] 


d[n-1] 



*^»^lectoiJ ^tfdector| ^»jselectori p>jselectoH 



||j=0.1.2j 



d[Wr] 



w 



(b)G(x. y. z.wmmmm 

X Y Z W ^IBJ-x— £ 



1 


r 


j«<1 
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[05] 



(a) x r = z r = r mod 3, y r =w r = r+[r/3]mod 3 



(b) 



9<@T*MIh1 



r 


1 

0 


1 


2 


3 


4 


l 

5 


6 


7 


8 


I 

9 


I 

0. 


X r 


0 


1 


2 


0 


1 


2 


0 


1 


2 


0 


1 . 


Y r 


0 


1 


2 


1 


2 


0 


2 


0 


1 


O 


1 . 


Zr 


0 


1 


2 


0 


1 


2 


0 


1 


2 


0 


1 . 


Wr 


0 


1 


2 


1 


2 


0 


2 


0 


1 


0 


1 . 



(c) 



r(SI) 


ORDER 12(X.YZ.W.r) -« 


0 


(X.Y.Z.W) 


1 


(Y r X,W T Z) 


2 


(Z.WXY) 


3 


(W.Z.Y.X) 


4 


0C.Z.W.Y) 


5 


(Y.WZX) 


6 


(ZXY.W) 


7 


(W.YXZ) 


8 


(X.W.Y.Z) 


9 


(Y.Z.X.W) 


1 O 


(Z.Y.W.X) 


1 1 


(WXZ.Y) 
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[0 6] 



( a ) m mxit^-— tfM) 



mo 



mi 



S6 



So 



rr>2 



S5 



Si 



32 



IT13 



S5 



S 2 



rr>4 



S5 



S3 



1T15 



S5 



S 4 



S6 



S 5 



32 



MDS^ffl l^tz X O RtmgS 



32 



(b) S 5 (x) 



X 


S5(x) 


X 


S500 


X 


S500 


X 


S500 


0 


20 


8 


22 


16 


27 


24 


23 


1 


26 


9 


30 


17 


11 


25 


5 


2 


7 


10 


13 


18 


1 


26 


8 


3 


31 


11 


14 


19 


21 


27 


3 


4 


19 


12 
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